www.campesperanzanica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:78:e1:bb:0d:03:eb:49:a5:f6:f9:2c:54:c4:d7:90:0c:79 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.campesperanzanica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:e1:bb:0d:03:eb:49:a5:f6:f9:2c:54:c4:d7:90:0c:79
Serial Number (int): 389583075280099581633924122711137287408761
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:c1:69:64:51:6a:57:ec:3e:1c:89:5c:e0:61:fb:36:7a:0e:c1:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:ef:d9:a0:43:69:e3:fd:19:67:47:65:7c:93:80:34:00:71:55:7e
Fingerprint (sha256): 44:08:9c:68:c6:f0:d1:73:64:03:a4:b9:2b:d9:70:6c:2e:01:4d:9c:99:de:c8:81:5c:0a:b2:0e:4d:15:97:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.campesperanzanica.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.campesperanzanica.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campesperanzanica.org
catholicmediainternational.org
ccesd1.com
ccesd4.com
christthekingcolumbus.com
cmi-media.net
collinscatholicschool.org
countrymonks.org
cureofars.com
dioceseofspokane.org
goodcounselcamp.org
holyfamilyyakima.org
holyinfantparish.com
holyrosarymoxee.org
jp2centre.com
olsscc.org
olvboston.com
pilgrimcluster.org
premierbasketballreport.com
sacredheartfruita.com
saintaugustine-dc.org
saintkevinschool.com
saintkevinschool.org
saintmarysmarne.org
saintmatthias.org
sapparish.org
shparishspokane.org
sspeterpaulnb.org
stannepharrtx.org
stbartsfw.org
stbridgetofsweden.org
stcolumbacatholic.com
stfrancisorangetx.org
stjohnfenton.org
stjosephcc.com
stjosephwsp.org
stmarkgoodrich.org
stmarklancaster.com
stmarymarshall.org
stmarysaurora.org
stmarysparish.net
stoughtoncatholic.org
stpatrickmcewen.org
stpaulgenesee.net
stpiusvchurch.com
utdcatholic.org
vocationsboston.com
vocationsboston.org
www.campesperanzanica.org
www.catholicmediainternational.org
www.ccesd1.com
www.ccesd4.com
www.christthekingcolumbus.com
www.cmi-media.net
www.collinscatholicschool.org
www.countrymonks.org
www.cureofars.com
www.dioceseofspokane.org
www.goodcounselcamp.org
www.holyfamilyyakima.org
www.holyinfantparish.com
www.holyrosarymoxee.org
www.jp2centre.com
www.olsscc.org
www.olvboston.com
www.pilgrimcluster.org
www.premierbasketballreport.com
www.sacredheartfruita.com
www.saintaugustine-dc.org
www.saintkevinschool.com
www.saintkevinschool.org
www.saintmarysmarne.org
www.saintmatthias.org
www.sapparish.org
www.shparishspokane.org
www.sspeterpaulnb.org
www.stannepharrtx.org
www.stbartsfw.org
www.stbridgetofsweden.org
www.stcolumbacatholic.com
www.stfrancisorangetx.org
www.stjohnfenton.org
www.stjosephcc.com
www.stjosephwsp.org
www.stmarkgoodrich.org
www.stmarklancaster.com
www.stmarymarshall.org
www.stmarysaurora.org
www.stmarysparish.net
www.stoughtoncatholic.org
www.stpatrickmcewen.org
www.stpaulgenesee.net
www.stpiusvchurch.com
www.utdcatholic.org
www.vocationsboston.com
www.vocationsboston.org

Other certificates including the domain name campesperanzanica.org

(limited to 100 certificates)
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org
www.campesperanzanica.org

Certificate

The complete raw certificate details for www.campesperanzanica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWYe56FWFc45hpEqwbPZ
irPW8VfPJDvcbZvFCUP2rQ+ejxDN7aGFSnzA/XxLAwaufWlPCBbSrf56M4+FlwNv
0NdC65+CsKirLNHSPRzRSeFxLEPRR4/uUznB6mdKTcqY2KXyzltdNrt4ARvG+A6t
ep/0n3L+5eBeRCEtJtoO7UFGu7A3oYh6YgdsLvePqEA/FzvaD0KSz+4x5rjIWQPn
+Kw1cbgklYrKs7ldF1FMAIdMwefGGr67foGJBejk5JLSGYOmMkaL+fAhsNGig7Vr
hcCiR3tBOXbqJLrS5oiG5gTIoQxtxnlaCzROlaRNyXifTOLPaBsiWV+DKU61iFLW
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389583075280099581633924122711137287408761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-29 17:24:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-27 17:24:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.campesperanzanica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25424256902998662745373180215658106249863188539979961560622960949833834420028586489715859668030063466850107760586085000969439862682611025286146803314845123062717846781106453408437506236496260374704063430608202727288324884895474200774904819587865501176418348206557208693897440393896996737462934351642024237957569027678408915944218587554161960692874617327289223154902601662612197871487400871605497682003148088745287695063480542721200144605896313543754277512780366345841312725772190516974208752068534470944462014992186988207582972053598252784803393943897328036840662674021188304371708380296145234544227445389931618424369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39c16964516a57ec3e1c895ce061fb367a0ec1bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campesperanzanica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicmediainternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccesd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccesd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingcolumbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmi-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collinscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrymonks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cureofars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dioceseofspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodcounselcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyyakima.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyinfantparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarymoxee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2centre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olsscc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilgrimcluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierbasketballreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartfruita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintaugustine-dc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintkevinschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintkevinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarysmarne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmatthias.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shparishspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspeterpaulnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannepharrtx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbartsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbridgetofsweden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbacatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancisorangetx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnfenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephwsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarkgoodrich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarklancaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarymarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoughtoncatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickmcewen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulgenesee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpiusvchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocationsboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocationsboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campesperanzanica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicmediainternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccesd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccesd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingcolumbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmi-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countrymonks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cureofars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dioceseofspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodcounselcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyyakima.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyinfantparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarymoxee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2centre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olsscc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilgrimcluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premierbasketballreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartfruita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintaugustine-dc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintkevinschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintkevinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarysmarne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmatthias.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sapparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shparishspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspeterpaulnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannepharrtx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbartsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbridgetofsweden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbacatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancisorangetx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnfenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephwsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkgoodrich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarklancaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarymarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoughtoncatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickmcewen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulgenesee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpiusvchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utdcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vocationsboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vocationsboston.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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